I have a Cisco switch 3560 with a router for private VPN plugged into it. Unfortunately I don't have any kind of access into this router.
I'm going to set a local SPAN and mirror all traffic to another port where I'll plug my sniffer.
I need to generate graphs that will show me what kind of traffic is going through VPN.
Preferably some Linux freeware application which will provide me graphs (something like Cacti) but I need more specific reports with ports and IP addresses.
Is Ntop what I'm looking for? Will it work the way I want?